EUVD-2010-4851

Malware in sbrugna...

EUVD-2025-20284

Malicious code in bioql PyPI...

Fedora 16 : ReviewBoard-1.6.3-1.fc16 (2011-15935)

New upstream security release 1.6.3 - Security Fixes : - A script injection vulnerability was discovered in the commenting system. This affected the diff viewer and screenshot pages, and allowed a commenter to break the page and execute JavaScript Note that Tenable Network Security has extracted...

CVE-2011-4312

Multiple cross-site scripting XSS vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 diff viewer or 2 screenshot component...

PT-2011-4925

Name of the Vulnerable Software and Affected Versions Review Board versions prior to 1.5.7 Review Board versions 1.6.x prior to 1.6.3 Description The issue involves multiple cross-site scripting XSS vulnerabilities in the commenting system. These vulnerabilities allow remote attackers to inject...

Sql injection

SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1822

Name of the Vulnerable Software and Affected Versions TYPO3 Commenting system Backend Module commentsbe extension versions 0.0.2 and earlier Description A SQL injection issue exists in the Commenting system Backend Module commentsbe extension for TYPO3, allowing remote attackers to execute...

CVE-2010-4887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-2104

The CVE-2009-2104 entry describes a Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension for TYPO3, affecting version 2.7.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2009-2104: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Modern Guestbook / Commenting System veguestbook extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...